ROCHESTER, N.Y.--(BUSINESS WIRE)--Jul 8, 2026--
Token, the biometric identity assurance company, today announced the appointment of Robert Costello to its Industry Advisory Board. The former Chief Information Officer of the Cybersecurity and Infrastructure Security Agency (CISA) and current Chief Digital and Information Officer at Merlin, Costello brings more than two decades of federal cyber, modernization, and mission-technology leadership to a board that guides Token’s response to the threats facing the world’s most critical organizations.
This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260708547541/en/
Token’s Industry Advisory Board is composed of senior cybersecurity executives, CISOs, and government security leaders responsible for protecting some of the world’s most critical organizations and infrastructure.
The appointment comes at a defining moment for enterprise security. Credential compromise remains the leading cause of enterprise breaches, and AI has made the problem structurally worse — phishing, deepfakes, and social engineering now operate at machine speed, while the credentials underneath have not fundamentally changed. As enterprises move AI agents from advisory roles into operational workflows, a second question has emerged: who, exactly, approves the high-consequence actions those agents are now capable of taking? Token recently extended its biometric architecture in response to that question, placing hard gates around actions such as releasing funds, changing access rights, or modifying production systems, so that an AI agent can prepare the work, but only a verified, physically present human can approve the outcome.
Token’s cryptographic biometric identity assurance proves the human, not just the credential. Rather than layering factors onto weak credential foundations, Token binds both access and approval to a verified, physically present person through on-device biometric authentication enforced on secure hardware. The TokenCore product line — including the TokenCore Wearable, TokenCore Portable, and TokenCore Node — integrates with existing IAM, SSO, and PAM infrastructure. It does not replace the identity stack; it completes it.
“The CISOs and security leaders on our Industry Advisory Board live with the consequences of identity failure every day, and that perspective is exactly what shapes where we take this technology,” said Kevin Surace, CEO of Token. “Robert has modernized and defended technology at the scale of national infrastructure, under constraints most enterprises never face. As the question shifts from ‘Who logged in?’ to ‘Who approved this action — a human or an agent?’, his judgment is exactly the kind we want guiding us.”
Costello currently serves as Chief Digital and Information Officer at Merlin, where he leads digital strategy, enterprise architecture, artificial intelligence adoption, and secure technology modernization for public sector and critical infrastructure customers. Before joining Merlin, he served as CIO at CISA, where he led major modernization efforts across zero trust, enterprise architecture, cloud adoption, identity management, application modernization, and secure mission technology. His career has also included senior technology roles at Department of Homeland Security components, including Customs and Border Protection (CBP) and Immigration and Customs Enforcement (ICE), as well as private-sector experience supporting federal civilian missions. A U.S. Air Force veteran and CISSP, Costello brings a practitioner’s view of cybersecurity: technology has to work in real environments, under real constraints, for operators who do not have time for theater. His work sits at the intersection of cyber operations, mission enablement, modernization, and technology innovation.
About Token
Token provides biometric-assured identity solutions for enterprises that need to stop credential theft, phishing, social engineering, and account takeover at the point of access. Token products combine biometric fingerprint verification, secure hardware, FIDO2 and WebAuthn authentication, and wireless ease of use to ensure that only the right person can access critical systems. Token protects workforce access across modern enterprise applications, identity providers, and cloud platforms.
Founded in 2014 and backed by Grand Oaks Capital, Token delivers secure, passwordless authentication solutions that help organizations reduce identity-based risk and strengthen workforce security. For more information, visit www.tokencore.com.
Robert Costello is named to the Token Industry Advisory Board
